Buggy code:
public class ModClusterSSLResourceDefinition extends SimpleResourceDefinition { static final PathElement PATH = PathElement . pathElement ( SSL , CONFIGURATION ) ; public static final SimpleAttributeDefinition KEY_ALIAS = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . KEY_ALIAS , STRING , true ) . setAllowExpression ( true ) . setRestartAllServices ( ) . addAccessConstraint ( CREDENTIAL ) . build ( ) ; public static final SimpleAttributeDefinition PASSWORD = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . PASSWORD , STRING , true ) . setAllowExpression ( true ) . setDefaultValue ( new ModelNode ( "changeit" ) ) . setRestartAllServices ( ) . addAccessConstraint ( CREDENTIAL ) . build ( ) ; public static final SimpleAttributeDefinition CERTIFICATE_KEY_FILE = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . CERTIFICATE_KEY_FILE , STRING , true ) . setAllowExpression ( true ) . setDefaultValue ( new ModelNode ( ) . set ( new ValueExpression ( "${user.home}//.keystore" ) ) ) . setRestartAllServices ( ) . build ( ) ; public static final SimpleAttributeDefinition CIPHER_SUITE = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . CIPHER_SUITE , STRING , true ) . setAllowExpression ( true ) . setRestartAllServices ( ) . build ( ) ; public static final SimpleAttributeDefinition PROTOCOL = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . PROTOCOL , STRING , true ) . setAllowExpression ( true ) . setDefaultValue ( new ModelNode ( "TLS" ) ) . setRestartAllServices ( ) . build ( ) ; public static final SimpleAttributeDefinition CA_CERTIFICATE_FILE = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . CA_CERTIFICATE_FILE , STRING , true ) . setAllowExpression ( true ) . setRestartAllServices ( ) . build ( ) ; public static final SimpleAttributeDefinition CA_REVOCATION_URL = SimpleAttributeDefinitionBuilder . create ( CommonAttributes . CA_REVOCATION_URL , STRING , true ) . setAllowExpression ( true ) . setRestartAllServices ( ) . build ( ) ; static final SimpleAttributeDefinition [ ] ATTRIBUTES = new SimpleAttributeDefinition [ ] { ModClusterSSLResourceDefinition . KEY_ALIAS , ModClusterSSLResourceDefinition . PASSWORD , ModClusterSSLResourceDefinition . CERTIFICATE_KEY_FILE , ModClusterSSLResourceDefinition . CIPHER_SUITE , ModClusterSSLResourceDefinition . PROTOCOL , ModClusterSSLResourceDefinition . CA_CERTIFICATE_FILE , ModClusterSSLResourceDefinition . CA_REVOCATION_URL } ; public static final Map < String , SimpleAttributeDefinition > ATTRIBUTES_BY_NAME ; private final List < AccessConstraintDefinition > accessConstraints ; static void buildTransformation ( ModelVersion version , ResourceTransformationDescriptionBuilder builder ) { <START_BUG> if ( VERSION_1_2_0 . requiresTransformation ( version ) ) { <END_BUG> builder . addChildResource ( ModClusterSSLResourceDefinition . PATH ) . getAttributeBuilder ( ) . addRejectCheck ( SIMPLE_EXPRESSIONS , ModClusterSSLResourceDefinition . CIPHER_SUITE , ModClusterSSLResourceDefinition . KEY_ALIAS , ModClusterSSLResourceDefinition . PROTOCOL ) ; } } public ModClusterSSLResourceDefinition ( ) { } @ Override public void registerAttributes ( ManagementResourceRegistration resourceRegistration ) { } @ Override public List < AccessConstraintDefinition > getAccessConstraints ( ) { } }

Fix:
if ( VERSION_1_3_0 . requiresTransformation ( version ) ) {